diff --git a/.github/workflows/signature-assistant.yml b/.github/workflows/signature-assistant.yml
index 4820e94..dc74d30 100644
--- a/.github/workflows/signature-assistant.yml
+++ b/.github/workflows/signature-assistant.yml
@@ -20,7 +20,7 @@ jobs:
       )
     runs-on: ubuntu-latest
     steps:
-      - uses: scratchfoundation/scratch-agreements/.github/actions/cla-allowlist@main
+      - uses: scratchfoundation/scratch-agreements/.github/actions/cla-allowlist@5891c64bbb78c41702413f454a6f5f19d5597de0 # main
         id: cla-allowlist
       - name: "CLA Assistant"
         uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1